Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2-DL9NZpKl5OHgHSsRL-pru_90w.cer
File: 2-DL9NZpKl5OHgHSsRL-pru_90w.cer (raw, json)
Hash identifier: 4ozfvRoSk6DYY+PwyvQED9wLmlGlsxf6PR/U6H5J3kA=
Subject key identifier: DB:E0:CB:F4:D6:69:2A:5E:4E:1E:01:D2:B1:12:FE:A6:BB:BF:F7:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0193696BE5F78C37A7D08B0AC96E71F5C06E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/ae519c-1690-40bc-b671-927e9cf7b025/1/2-DL9NZpKl5OHgHSsRL-pru_90w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/ae519c-1690-40bc-b671-927e9cf7b025/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 26 Nov 2024 17:01:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 213809
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:6b:e5:f7:8c:37:a7:d0:8b:0a:c9:6e:71:f5:c0:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 26 17:01:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dbe0cbf4d6692a5e4e1e01d2b112fea6bbbff74c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ad:26:9d:26:92:6f:b3:e9:fe:64:d5:42:68:
2e:b0:e6:af:ce:1e:79:20:d4:5c:4c:6f:c7:29:88:
f5:ba:94:af:2e:6e:e8:0d:33:33:69:01:f7:e3:9f:
c1:23:3a:1a:b7:2f:93:72:51:43:a3:48:d2:cc:ee:
0b:9c:cd:10:e3:e6:e0:14:c0:11:6d:46:09:49:43:
d0:e7:c4:db:a9:9c:e4:80:d9:11:8c:6a:1f:21:bd:
ef:42:74:08:4c:da:83:dd:49:d6:73:51:43:14:4e:
db:de:47:f1:31:5a:90:a4:ac:aa:d5:6d:17:ea:55:
d2:84:c9:07:18:74:17:b9:3b:26:48:06:0b:40:fc:
63:4f:41:e8:a3:5d:cc:78:33:b7:41:04:98:7e:3b:
5e:88:53:a3:0e:82:6d:5c:83:d5:2d:e9:11:ed:df:
19:c0:eb:70:aa:79:b5:5e:1f:68:96:90:7b:5e:2f:
4c:ae:fc:48:fe:b1:b5:50:4c:b8:b9:0e:01:16:7f:
2c:ce:a4:fa:87:1b:fd:ab:2c:ea:1b:87:88:40:51:
c5:60:86:a4:94:16:b6:51:0c:7c:cd:f6:7e:b6:3a:
23:23:5c:d8:a0:35:d2:91:79:73:f7:66:4d:58:b1:
d1:04:cf:c4:f9:c1:ab:94:e7:25:2f:6b:2c:9d:e9:
7b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E0:CB:F4:D6:69:2A:5E:4E:1E:01:D2:B1:12:FE:A6:BB:BF:F7:4C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/ae519c-1690-40bc-b671-927e9cf7b025/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/ae519c-1690-40bc-b671-927e9cf7b025/1/2-DL9NZpKl5OHgHSsRL-pru_90w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213809
Signature Algorithm: sha256WithRSAEncryption
5c:10:7b:eb:61:7b:36:b8:20:b8:5d:bd:d0:81:f3:fc:b1:4b:
09:7f:2f:39:51:a0:e6:11:eb:2b:49:65:9f:35:61:ed:a3:05:
d4:e8:bd:f6:1c:e5:df:c7:6e:de:ee:da:65:b8:69:64:8a:fa:
cf:4a:5c:cb:46:06:84:dd:32:17:cc:53:47:a5:e4:2f:ec:9e:
f1:27:5e:ed:ea:d9:3d:57:f8:ee:12:52:10:1f:92:f1:0d:65:
d0:47:f9:58:82:2e:d1:3a:4b:cc:89:65:85:9b:6b:f5:57:c3:
26:88:a2:f8:c4:b5:63:6f:9e:2e:a9:2d:3c:85:48:6f:2a:c7:
25:1e:d0:97:c2:1d:2b:85:b6:a3:76:cc:0f:a7:6c:79:f8:c0:
20:7d:e8:07:49:51:bf:e5:58:dd:2b:76:3b:0b:13:f6:6e:1a:
00:66:97:54:08:76:da:7d:1c:ef:80:e2:e2:6a:61:4d:3b:1f:
91:6d:49:05:ab:1f:da:24:ce:44:1e:be:04:c9:e6:99:8b:1c:
56:ac:54:f0:13:31:61:ee:05:38:2c:29:eb:04:06:aa:87:59:
f1:e1:49:c8:52:b7:33:06:05:42:fe:6f:05:da:76:7a:32:80:
f0:1e:a7:4c:c6:97:c8:3a:52:93:9a:62:73:d3:33:5d:22:2f:
6b:8c:70:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 16:50:15 2024 by rpki-client on console-fra.rpki-client.org